General

  • Target

    ab408b51d3186d5baca08a819d5833b492c8a3559192bacf1790445b1c9e1ce7

  • Size

    899KB

  • Sample

    240625-lr74esvhqp

  • MD5

    c94e371d142d8f046d03cc7268840af0

  • SHA1

    b7b45862d1690b478d54d0d5971b6aa2074cb182

  • SHA256

    ab408b51d3186d5baca08a819d5833b492c8a3559192bacf1790445b1c9e1ce7

  • SHA512

    99a7c362bf815e756037d77854b89e6726e7c35f70d9ca01d45416a2a9d97a65a47267b43591b01aed46d10438f39681b20ef780cb5b195b9a5dc43d548534f4

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXg:7wqd87Vg

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      ab408b51d3186d5baca08a819d5833b492c8a3559192bacf1790445b1c9e1ce7

    • Size

      899KB

    • MD5

      c94e371d142d8f046d03cc7268840af0

    • SHA1

      b7b45862d1690b478d54d0d5971b6aa2074cb182

    • SHA256

      ab408b51d3186d5baca08a819d5833b492c8a3559192bacf1790445b1c9e1ce7

    • SHA512

      99a7c362bf815e756037d77854b89e6726e7c35f70d9ca01d45416a2a9d97a65a47267b43591b01aed46d10438f39681b20ef780cb5b195b9a5dc43d548534f4

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXg:7wqd87Vg

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks